Ceilometer

ceilometer throws 500 while querying event-[type-]list with non-admin creds

Bug #1365770 reported by Srinivas Sakhamuri
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ceilometer
Fix Released
Medium
Srinivas Sakhamuri
Ceilometer 2014.2 "juno"

Bug Description

Ceilometer api throws an 500 error when querying event-list or event-type-list without admin credentials. Excepted behavior is to display Unauthorized error (401) when there is no authorization for querying the project.

Srinivas Sakhamuri (srinivas-sakhamuri)
Changed in ceilometer:
assignee: nobody → Srinivas Sakhamuri (srinivas-sakhamuri)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to ceilometer (master)

Fix proposed to branch: master
Review: https://review.openstack.org/119445

Changed in ceilometer:
status: New → In Progress
Eoghan Glynn (eglynn)
Changed in ceilometer:
milestone: none → juno-rc1
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to ceilometer (master)

Reviewed: https://review.openstack.org/119445
Committed: https://git.openstack.org/cgit/openstack/ceilometer/commit/?id=e3fb64b2a05ef066a888739f60e189428e10629f
Submitter: Jenkins
Branch: master

commit e3fb64b2a05ef066a888739f60e189428e10629f
Author: srsakhamuri <email address hidden>
Date: Fri Sep 5 18:59:01 2014 +0000

    Returns 401 when unauthorized project access occurs

    Throwing wsme based exceptions out of non-wsme context causes api server
    to return 500 since the exception goes uncaught. Instead return
    http response with error code 401 to return to client safely

    Change-Id: Ifb753581e392ea7961b976bc97ee2348feb6825c
    Closes-Bug: 1365770

Changed in ceilometer:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in ceilometer:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in ceilometer:
milestone: juno-rc1 → 2014.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.